https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:04:01 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00822 bdu:2019-00822 https://cve.radiocsirt.org/vuln/bdu:2019-00822 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/certfr-2022-avi-591 https://cve.radiocsirt.org/vuln/cnvd-2018-25306 cnvd-2018-25306 https://cve.radiocsirt.org/vuln/cnvd-2018-25306 https://cve.radiocsirt.org/vuln/euvd-2026-71245 EUVD-2026-71245 https://cve.radiocsirt.org/vuln/euvd-2026-71245 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1002105 <p>In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server&#39;s TLS credentials used to establish the backend connection.</p> <p>In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server&#39;s TLS credentials used to establish the backend connection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1002105 https://cve.radiocsirt.org/vuln/ghsa-579h-mv94-g4gp <p><strong>Affected:</strong> Go: github.com/kubernetes/kubernetes</p> <p>In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server&#39;s TLS credentials used to establish the backend connection.</p> <p><strong>Affected:</strong> Go: github.com/kubernetes/kubernetes</p> <p>In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server&#39;s TLS credentials used to establish the backend connection.</p> https://cve.radiocsirt.org/vuln/ghsa-579h-mv94-g4gp https://cve.radiocsirt.org/vuln/gsd-2018-1002105 gsd-2018-1002105 https://cve.radiocsirt.org/vuln/gsd-2018-1002105 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0554-1 <p>Security update for kubernetes</p> <p>Security update for kubernetes</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:0554-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2906 <p>atomic-openshift: oc patch with json causes masterapi service crash kubernetes: authentication/authorization bypass in the handling of non-101 responses</p> <p>atomic-openshift: oc patch with json causes masterapi service crash kubernetes: authentication/authorization bypass in the handling of non-101 responses</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2906 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1002105 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes</p> <p>In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server&#39;s TLS credentials used to establish the backend connection.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes</p> <p>In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server&#39;s TLS credentials used to establish the backend connection.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1002105 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, willkürlichen Code mit erhöhten Rechten auszuführen, Informationen falsch darzustellen und beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0510